Skip to content
gohacks.dev
Security

MD5 and CRC32 Hash Generator

Compute the MD5 and CRC32 of text, per line if needed, matching md5sum and PHP's md5() and crc32(). For checksums, not for passwords.

Free · No sign-up · Your inputs stay in your browser

Input

MD5 and CRC32 checksums of text

Output

Checksums

MD5

9e107d9d372bb6826bd81d3542a419d6

CRC32 (hex)

414fa339

CRC32 (decimal, as PHP crc32())

1095738169

MD5 is broken for anything security-related: collisions can be produced in seconds. It is still fine as a checksum against accidental corruption, an ETag or a cache key. For passwords use password_hash(); for integrity against tampering, SHA-256.

Runs in this browser. Nothing you paste is sent to a server.

MD5 is broken, and still everywhere

Practical MD5 collisions have been demonstrated since 2004, and RFC 6151 says not to use it where collision resistance matters: signatures, certificates, anything an attacker can influence. It remains fine for detecting accidental corruption, cache keys, ETags and deduplication, which is where you meet it.

Passwords

A fast hash is the wrong tool for passwords whatever the algorithm, because fast means billions of guesses a second on a GPU. Use password_hash() in PHP or Laravel's Hash::make(), which use bcrypt or Argon2 with a salt and a cost factor.

CRC32

CRC-32 is a checksum, not a hash: it catches transmission errors and nothing else, and is trivial to forge. ZIP and gzip use it to check that a file decompressed correctly.

Share

Frequently asked questions

Why does my MD5 differ from md5sum?
echo adds a newline. echo -n 'text' | md5sum, or printf 'text' | md5sum, hashes the same bytes as this tool.
Can an MD5 hash be reversed?
Not mathematically, but short or common inputs can be found in precomputed tables in seconds, which is why MD5 must never store passwords.
Is what I paste sent anywhere?
No. The tool runs entirely in your browser with JavaScript. Nothing you type or paste is sent to our server or stored.

Keep planning

Similar tools